Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
File: X0qPBO8v6-VPnbapovhWWUtuLwg.mft (raw, json)
Hash identifier: uimnoV1RwXSxsE6DZ18kI1cAEBTWwC0RVyp7C6+/1GQ=
Subject key identifier: FA:A6:04:13:C6:42:26:49:A0:11:B0:2B:B4:57:64:4B:0D:9A:6C:E3
Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Certificate serial: 01A16834E1C448CD0983AB0C616A1122F0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
Manifest number: 165A
Signing time: Fri 23 Oct 2026 10:00:58 +0000
Manifest this update: Fri 23 Oct 2026 10:00:58 +0000
Manifest next update: Sat 24 Oct 2026 10:00:58 +0000
Files and hashes: 1: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (hash: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM=)
2: X0qPBO8v6-VPnbapovhWWUtuLwg.crl (hash: CgWPSid4Krn6P7qgCLLQB2qS99tnMPv45/azfihzhq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:34:e1:c4:48:cd:09:83:ab:0c:61:6a:11:22:f0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08
Validity
Not Before: Oct 23 10:00:58 2026 GMT
Not After : Oct 24 10:00:58 2026 GMT
Subject: CN=faa60413c6422649a011b02bb457644b0d9a6ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:aa:20:fa:85:30:8f:7a:16:48:b8:09:3a:
08:71:16:32:32:64:fe:ea:25:af:ab:5c:78:cf:f9:
a5:92:89:0c:c1:ac:af:1d:36:8a:af:91:f1:66:b4:
59:a4:54:f5:7d:59:92:60:46:78:65:49:26:08:76:
0b:11:51:99:98:53:68:13:9a:4c:9c:80:26:68:b8:
bc:97:df:7e:0c:6c:4f:c6:8f:65:96:46:af:09:ea:
d3:87:cc:c3:b8:fb:9e:12:cd:aa:80:3d:bb:e3:b7:
b5:41:4d:75:b0:57:bf:00:22:9f:73:14:bb:f1:a6:
30:36:c4:18:dc:83:4d:e7:4c:6d:b7:26:d0:76:d6:
6c:f3:ee:3d:c3:b0:b5:42:75:ab:bb:fc:eb:e7:5d:
ba:3f:e7:7c:ca:68:3a:87:89:63:ad:53:e7:b9:49:
7d:2d:6e:5f:4c:82:20:cc:35:3a:e6:d1:eb:09:71:
5d:ea:e5:4e:79:82:b7:9e:76:71:23:7e:64:4d:3f:
b1:9e:5a:ff:77:94:5e:19:08:8a:6d:ff:68:e8:94:
85:44:2f:c1:a5:c1:f1:87:ef:0d:fb:86:7f:d3:94:
48:fa:da:90:bb:06:a6:2b:b4:d8:fd:f3:d3:e7:fe:
9b:20:0b:34:11:ae:18:2d:00:57:c0:60:7a:11:f9:
05:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A6:04:13:C6:42:26:49:A0:11:B0:2B:B4:57:64:4B:0D:9A:6C:E3
X509v3 Authority Key Identifier:
keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e7:b2:d9:70:9f:b7:69:69:24:e4:03:69:1d:04:b8:a0:82:
4d:aa:fa:f3:d1:5d:f7:3d:a3:4b:ab:50:28:29:48:03:a0:20:
c6:c5:c2:3d:1a:87:21:4e:8f:69:f8:e4:e2:42:2c:6f:54:6c:
ce:3d:1c:77:8d:9a:90:09:bd:e2:91:c9:75:11:e4:83:bc:b5:
11:e2:35:15:f5:80:ea:28:ad:6c:ad:99:d0:64:f5:d2:66:72:
28:27:07:1a:3f:78:98:14:bc:41:96:9d:4d:77:44:82:fd:e3:
fc:fa:1c:18:a1:1b:04:1f:d0:5a:f4:cb:ba:56:51:ba:0b:97:
a7:22:e0:af:04:de:f0:cf:6a:f4:79:3c:9e:73:27:6c:e1:09:
f8:1c:83:d2:3f:14:aa:80:a3:5b:62:10:ed:cd:d0:5a:0f:d1:
0e:6a:d8:c3:e9:9e:d1:23:c7:21:76:65:cb:9b:4e:6c:e1:64:
fc:97:f6:c8:12:be:16:fb:6f:4d:0d:f5:8b:d4:a9:f5:be:56:
ee:2c:85:16:dc:8b:47:58:47:45:83:bf:d8:12:e1:25:cd:3f:
74:63:4f:0d:02:34:ef:9c:09:4a:a9:45:64:d5:5f:45:6e:17:
8d:47:74:5b:ab:a7:34:84:5e:e8:c5:e3:aa:9a:ae:34:46:ac:
e7:11:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 15:37:03 2026 by rpki-client